Added timeboxed Auditevents example to the GraphQL Cookbook

[james2791]

Similar to what we have for the auditEvents query, just with a example using occurredAtFrom and occurredAtTo filtering

[buildkite-docs-bot]

Preview URL: https://2301--bk-docs-preview.netlify.app

[mbelton-buildkite]

Good catch! Thanks :)

[mbelton-buildkite]

Since this still relates to audit events, I think it might be good to include it under the same heading. Thinking:

### Get organization audit events

Query your organization's audit events. Audit events are only available to Enterprise customers.

To get the first 500 audit events, use the following query:

```graphql
  query getOrganizationAuditEvents{
    organization(slug:"organization-slug"){
      auditEvents(first: 500){
        edges{
          node{
            type
            occurredAt
            actor{
              name
            }
            subject{
              name
              type
            }
          }
        }
      }
    }
  }
```

To get all audit events in a given period, use the `occurredAtFrom` and `occurredAtTo` filters like in the following query:

```graphql
  query getOrganizationAuditEvents{
    organization(slug:"organization-slug"){
      auditEvents(first: 500, occurredAtFrom: "2023-01-01T12:00:00.000", occurredAtTo: "2023-01-01T13:00:00.000"){
        edges{
          node{
            type
            occurredAt
            actor{
              name
            }
            subject{
              name
              type
            }
          }
        }
      }
    }
  }
```

What do you think?

[james2791]

Just tweaked it to the above @mbelton-buildkite 🙂

Probably not needing that H2 anyway since its the same context, just filters

[mbelton-buildkite]

One last comment about indenting, but otherwise looks good :)

[mbelton-buildkite]

I don't think this needs to be indented?

Suggested change

	query getOrganizationAuditEvents{
	organization(slug:"organization-slug"){
	auditEvents(first: 500, occurredAtFrom: "2023-01-01T12:00:00.000", occurredAtTo: "2023-01-01T13:00:00.000"){
	edges{
	node{
	type
	occurredAt
	actor{
	name
	}
	subject{
	name
	type
	}
	}
	}
	}
	}
	}
	query getOrganizationAuditEvents{
	organization(slug:"organization-slug"){
	auditEvents(first: 500, occurredAtFrom: "2023-01-01T12:00:00.000", occurredAtTo: "2023-01-01T13:00:00.000"){
	edges{
	node{
	type
	occurredAt
	actor{
	name
	}
	subject{
	name
	type
	}
	}
	}
	}
	}
	}

[james2791]

Fixed that extra indentation @mbelton-buildkite 😉 (sitting on me for a bit - apologies!)

[mbelton-buildkite]

Nice! Looks good to merge when you're ready :)